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ASYMMETRIC SATELLITE-BASED INTERNET SERVICE 
tnventor .: Khalid Monir A.. El-Rafie 

This Application is a continuation of U.S. Patent Application 60/059709, filed on 
September 22, 1997, and U.S. Patent Application 60/065424, filed on November 13, 
1997, both entitled Asymmetric Satellite-Based Internet Service and having the same 
inventors as the present application, both herein incorporated by reference. 

Field of the Invp.ntjnn 

The present invention is directed generally to systems and methods for asymmetric 
satellite networks, and, more particularly, to systems and methods for providing 
asymmetric satellite-based services such as Internet services. 

Description nf th^ Related Art 
1 5 Conventionally, asymmetric sateUite Internet service may be provided as shown in 

Fig. 17. Such a system is described in Arora, et al., Asymmetric Internet Access Over 
Satellite-Terrestrial Networks, the American Institute of Aeronautics and Astronautics, 
1985. In the conventional system 500 shown in Fig. 17, the hybrid teiminal 501 
includes an application 502 which utilizes a customized TCP/IP stack 503. The 
customized TCP/IP stack performs a spoofing function in which a request for an 
Internet destination of "company.com" of an intended Intemet host 5 1 3 is encapsulated 
in a spoofing packet having a source address of the hybrid terminal 501 and a 
destination address of the hybrid gateway 511. The packet is thereafter sent to the 
hybrid gateway 51 1 via a unified customized driver 504, a modem 506, the public 
25 switched telephone network (PSTN) 507. an ISP 508, and the Intemet 509 via a first 
path 510. The hybrid gateway 511 then unencapsulates the original request. Thereafter, 
a new request is issued corresponding to the original request. The new request goes 
back out across the Intemet 509 via a second path 5 12 to access the Intemet host 513. 
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Data returned from the Internet host 5 1 3 is sent back to the hybrid gateway Silvia the 
internet again across the second path 512. The hybrid gateway 511 then outputs the 
data received from "company.com" back to the hybrid terminal 501 via the LAN 5 14. 
the Satellite Gateway 516, the uplink 517. the satellite 518. the downlink 519, the' 
satellite card 505, the customized driver 504. and the customized TCP/IP stack 503. 

The conventional system 500 is problematic for a number of reasons. For example, 
the TCP/IP driver on the hybrid terminal 501 must be customized and the standard 
"Windows" driver camiot be utilized. Further, the hybrid gateway 511 creates a 
bottleneck. Each request to a host must pass through the Internet to the hybrid gateway 
51 1. be reconfigured, pass back out through the Internet to the Internet host 513, return 
across the Internet back to the hybrid gateway 51 1, proceed across a LAN 514, through 
a satellite gateway 515 and then back to the hybrid temiinal. Accordingly, the 
conventional systems are difficult to install and maintain and suffer from performance 
problems. 

Swnmarv of the TnvpT^tj^p 

One or more aspects of the present invention solve one or more of the above 
problems and/or provide improved techniques for implementing asymmetric Internet 

access. 

In one aspect of the invention, the asymmetric satellite system is implemented by 
assigning Intemet IP addresses belonging to a centralized uplink center to plurality of 
users on the system Requests from the users to an Intemet host ar« routed back to the 
upUnk center and transmitted back to the terminal devices of each of the users via 
satellite. 

In another aspect of the invention, requests to Intemet hosts which are already 
stored in cache in the uplink center ar€ automatically routed directly to the uplink center 
- bypassing the host. 
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In yet another aspect of the invention, some requests made to the ISP are serviced 
locally by the ISP (e.g., mail requests) in a symmetric manner, while other requests 
such as FTP requests are returned asymmetrically via satellite through the uplink center. 

In still further aspects of the invention, the ISP has a plurality of router levels with 
a mail server connected to a first hop router. Requests which are not serviced by the 
first level router are forwarded to a second hop router. Requests at the second level 
router having a source IP address of the uplink center are routed to the Internet. 

In sun further aspects of the invention, an asymmetric terminal provides proxy 
service to a corporate LAN. 

In yet further aspects of the invention, the tenninal device provides Internet access 
to a head-end of a cable network. 

In yet further aspects of the invention, asymmetric Internet access is provided to 
each of a plurality of temiinal devices coupled to a cable network as the return path in 
the asymmetric network. 

In yet further aspects of the invention, asymmetric Intemet access is provided to an 
ISP whereby a mini-ISP may be set-up with normal telephone comiection to a network 
operations center and the return path includes a much higher speed coimection, e.g.. a 
satellite link. 

In yet further aspects of the invention, a settop box coupled to a cable network may 
have asymmetric Intemet access by coupling a satellite dish to the cable settop box. 
Hius, the settop box provides dual mode connectivity between the satellite antenna and 
the cable network. In this manner, a single MPEG decoder may provide multiple 
functions. AdditionaUy. the settop box may be able to seemlessly integrate multiple 
channels, virtual pages, in a single interactive program guide structure.- 

These and other features of the invention will be apparent upon consideration of the 
following detailed description of preferred embodiments. Although the invention has 
been defined using the appended claims, these claims are exemplary in that one or more 
aspects of the invention are intended to include the elements and steps described herein 
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m any combination or subcombination. For example, it is intended that each of the 
above aspects of the invention may be used individually and/or in combination with one 
or more other aspects of the invention. Accordingly, there are any number of 
alternative combinations for defining the invention, which incorporate one or more 
elements from the specification, including the description, claims, aspects of the 
mvention. and/or drawings, in various combinations or subcombinations. For example 
although satellite broadcasts are described in many of the embodiments, microwave 
transmissions may also be utilized. Accordingly, it will be apparent to those skilled in 
Internet theory and design, in light of the present specification, that alternate 
combinations and subcombinations of one or more aspects of the present invention 
either alone or in combination with one or more elements and/or steps defined herein 
may constitute alternate aspects of the invention. It is intended that the written 
description of the invention contained herein cover all such modifications and 
alterations. 

Brief Description of thp Prf"1nrri 

Th, foregoing summary of the invention, as weU as the following detailed 
description of preferred embodiments, is better understood when read in conjunction 
with the accompanying drawings, which are included by the way of example, and not 
by way of limitation with regard to the claimed invention. 

Figs. 1-2 are block diagrams of different embodiments of the asymmetric satellite 
system in accordance with aspects of the present invention. 

Figs. 2a and 2b are block diagrams of different embodiments of architectures which 
may be utilized by Internet semce providers GSPs) to achieve intelligent routing based 
on whether a resource is coupled to a first or second hop of the networic. 

Figs. 3^ are block diagrams of different embodiments of the asymmetric satellite 
system in accordance with aspects of tiie present invention. 
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Fig. 6A shows an embodiment where a microwave transmission replaces the 
satellite transmission in embodiments of the presem invemion. 

Figs. 7 is a block diagram of network operations center in accordance with 
embodiments of an asymmetric satellite system. 

Fig 7A is a block diagram of a caching system in accordance embodiments of the 
asymmetric satellite system. 

Fig. 7B is a functional block of a TCP/IP client/server model. 
Fig. 7C is a flow diagram of a cache system in accordance with embodiments of the 
asymmetric satellite system. 

Fig. 7D shows a cache system architecture which may be utilized to implement the 
configurations shown in Fig. 2. 

Figs. 8-9 are block diagrams of various VSAT configurations which may be utilized 
in the asymmetric satellite system in accordance with aspects of the invention. 

Fig. 10 is a block diagram showing caching operations to improve Internet access 
performance which may be utilized with content access control and multicasting 
distribution. 

Fig. 1 1-13 are diagrams Ulustrating the operation of multicasting remote control and 
supervisory functions in accordance witii tiie present invention. 

Fig. 14 illustrates operations of the bandwidtii management console in accordance 
witii the present invention. 

Fig. 15 is a block diagram illustrating the operation of a roaming function in 
accordance with aspects of the invention. 

Fig. 16 is a block diagram describing an exemplary conditional access system. 
Fig. 17 is a block diagram of a conventional asymmetric Intemetaccess system. 

Detailed Desrrintion nfPr.f.rj .^ ^ ^ Y-^ ^ mr 

Referring to Fig. 1. an asymmetric access system 1 includes a terminal device 2 
which may be any suitable temiinal device such as a personal computer, a server, and/or 
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a senop device. The terminal device 2 may include a storage device 20 such as a hard 
disk, DVD storage, or WORM storage. A driver 22 may interface the storage device 
20 with one or more applications 7. The applications 7 may, for example, include an 
Internet browser, e.g., "Explorer" running on top of a standard TCP/IP protocol stack 
8 e.g., the protocol stack in "Windows 95". The TCP/IP stack 8 in the terminal device 
2 need not be modified or customized to accommodate the present asymmetric access 
system 1 . The terminal device 2 preferably includes a unified driver 9. The unified 
driver 9 may interface to any number of physical communication interfaces such as a 
satellite card 19 and a modem 10. The modem 10 may be variously configured to 
include any modulation scheme. The modem may be coupled to a data link 12 such as 
the public switched telephone network (PSTN) and/or a cable network. Themodem 10 
may be coupled through the data link 12 to an ISP 13 which may be coupled to the 
Internet 21. Alternately, the modem 10 may interface directly to the NOC 4 via the 
PSTN 12. The Internet 21 may have one or more Internet Hosts 5 located at various 
server addresses such as "http://www.cmi.com". The Internet 21 may also be coupled 
to a network operation center 4. The network operation center 4 may be coupled via 
uplink 17 to a satellite 6 which may, in turn, be coupled to satellite downlink 1 8. The 
satellite downlink 1 8 may be broadcast to a number of locations such as to the satellite 
card 19 of the terminal device 2. The terminal device 2 may have a co-located satellite 
receiver 23. 

In operation, each temiinal device 2 includes a source IP address which corresponds 
to one of the network registered IP addresses of the network operation center (NOC) 4. 

The Internet IP addresses are divided into different network classes. Class A 
addresses have the first octet of the Internet address between 0 and 127. The network 
address is the first octet, with the host address being the next three octets. Class B 
addresses have the first octet of the Internet address between 128 and 191. The network 
address for class B service includes the first two octets, with the second two octets 
defining the host addresses. For class C, the first network address octet is between 1 92 
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and 223. The network address includes the first three octets. Only a single octet is used 
for the host address. For Class D, the first octet ranges between 224 and 239 with the 
next three octets also used to define the network. For class D, there is no host. Class 
D is exclusively reserved for multicasting. All of the current Internet addresses in 
classes A, B, and C have been distributed to the Internet providers on the Internet 
backbone. These service providers include UUNET, Sprint, MCI and AT&T. 
Accordingly, an IP address range must be reserved from one of these providers so that 
the NOG 4 has an associated address range to utilize with clients using the high speed 
transmission services of the NOC 4. The IP addresses reserved for NOC users may be 
assigned directly to the user on a static basis or assigned to the ISP 13 and thereafter 
assigned to the individual users on a dynamic basis. The dynamic assigmnent of IP 
addresses reserved for the NOC allows for roaming as discussed below with regard to 
Fig. 15. 

The IP assignment to each individual terminal can be done on either a static or 
dynamic basis between the Internet service provider 13 and the temiinal device 2. In 
a static arrangement, each temiinal device is assigned an Internet IP address which 
corresponds to one of the addresses of the NOC 4. Alternatively, the ISP may 
dynamically assign an IP address of the NOC 4 to each terminal. Wheie dynamic IP 
address assignmem are utilized, the ISP 13 may configure its server to include a 
database of each asymmetric access user such that asymmetric IP addresses of the NOC 
4 are assigned to asymmetric users based on a user ID. Alternately, all callers on certain 
designated phone lines may be assumed to be asymmetric users and assigned an IP 
address of the NOC 4. In this manner, only asymmetric access users are aUocated NOC 
IP addresses; whereas other users, which are not configured for the asymmetric satellite 
transfer, are allocated IP addresses which belong to the ISP and not the NOC 4. 

The IP ranges for class A, B. and C networks are divided among each poimK>f- 
presence (POP) on the Internet backbone network. Within that particular range, each 
pointK)f.presence may assign a subset of that range to various Internet service providers 
or networks that are attached to the point-of-presence router. The Internet service 
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providers, in turn, may provide a subset of the range to individual companies and to 
users on their network on a dynamic and/or static basis. In this way. an individual user 
may be assigned a dynamic or static IP address from the ISP. Alternatively a company 
may be assigned a range of IP addresses which are assigned to one or more LANs, e.g.. 
a LAN within an individual company. TTie individual company may also have a number 
of other IP addresses which are not known and not assigned over the Internet and have 
only local significance within the company. 

The addresses of local significance are not broadcast IP addresses, and are only 
valid locally, e.g.. on the LAN. The IP addresses on the LAN which are broadcast 
addresses are conventionally a subset of the range of IP addresses assigned to the point- 
of.pr«sence router utilized by the ISP. Hie point-of-presence router may, for example, 
be a router operated by AT&T and which runs BGP protocol. 

A broadcast IP address from a local company LAN or from an individual Internet 
user may be sem from the tenninal device 2 to the ISP. to the point-of-presence, and 
across the Internet backbone to any destination such as Internet host 50 (e.g.. cnn.com). 
Thereafter, the Internet host 5 (e.g.. cnn.com) can route the reply using the source 
address of the IP packet 

One aspect of the present invention involves assigning an IP address which belongs 
to the network operations center 4 to each asymmetric subscriber on the Internet 
regardless of whether that asymmetric subscriber is on a different point^f-presence 
comiected ISP. Hius. regardless of the location of the individual Internet subscriber, 
the subscriber may be dynamically and/or statically assigned an IP source address 
corresponding not to the ISP 13 but to tiie NOC 4. In tiiis mamier. an asymmetric 
satellite system user issues a request to a Internet host 5. e.g.. cmtcom, with the source 
address being one assigned to the NOC 4. Thus, when the r«,uest from the asymmetric 
satellite subscriber is issued to the Intemet host 5. the return path from the Internet host 
5 may be automatically routed to the NOC 4 for rebroadcast via satellite 6 directly to 
the terminal device 2. In this manner, the asymmetric subscriber has immediate access 
to the Intemet host 5 with a single Intemet transaction and witiiout going through a 
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hybrid gateway as in the conventional system. Thus, the asymmetric access system 1 
eliminates an entire Internet connection delay. 

The present system is advantageous over conventional systems in that information 
is returned from one or more Internet hosts directly to the NOC 4. Since the NOC 4 
may be directly connected to a point-of-presence router, and re-broadcasts are made 
directly to the end user, cable headend, and/or ISP, delays on the return path are 
minimized. 

The present system is further advantageous because a specialized TCP/IP stack is 
not required. Thus, the user can utilize the standard windows 95 TCP/IP stack and a 
conventional Internet browser. Modifications to the terminal device 2 are simply the 
loading of a satellite card 19 into an expansion slot and loadmg of the unified driver 9. 
Thus, the satellite card and unified driver can easily be integrated into any terminal 
device 2 regardless of the operating system. The specialized IP address assignment may 
be made by simply connecting to an authorized ISP having one or more IP addresses 
associated with the NOC 4. TTiis is a major and significant improvement over the 
customized software and hybrid gateway required for conventional systems. 

In the present system, the user only needs to be provided with one of the IP 
addresses of the NOC by the ISP. In other words, the asymmetric system may be folly 
accomplished by simply assigning an IP address to an individual subscriber which 
belongs to a range allocated to the NOC 4 of an asymmetric satelUte provider. A 
method of accomplishing the asymmetric routing scheme may include initiating a web 
request to an Internet host 5 with a return IP address belonging to a different point-of- 
presence than the originating request. 

Spoofing of the NOC 4 may be prevented by inserting a digital signature tag, such 
as an encrypted ID, into each request issued to the NOC 4. In these embodiments, the 
NOC 4 uses a router (e.g., a CISCO router) to perform filtering on incoming packets to 
ensure only packets with an approved digital signature and/or IP range are accepted into 
the NOC 4 for later processing. This security provision prevents the NOC 4 from being 
overrun by spoofed packets. 
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Testing of the invention has shown through-put rates for individual users in excess 
of 1.5 megabits per second. Due to economic considerations, it may be desirable to 
limit an individual user's throughput to a predetermined committed information rate 
(CIR) such as 200 and/or 400 kilobits per second, per user. Assuming that no other 
users are using the bandwidth, the user may receive the entire bandwidth. 

Referring specifically to Fig. 2, various generalized asymmetric satellite 
transmission architectures are shown. For example, the NOC 4 may provide 
asymmetric access to any ISP 169, cable headend 170, corporation 166 (e.g., a proxy 
server), and/or a teraiinal device 2. 

The terminals connected to the ISP 169 and/or corporate server 166 need not be 
asymmetric satellite enabled terminal devices 2. In other words, the ISP and/or 
corporate server may be asymmetric satelUte enabled while the individual terminals 40 
need not be asymmetric satellite enabled. These terminals 40 may access the Internet 
through the ISP or corporate server in a conventional manner (e.g., using 28.8 or 56K 
15 dial-up modems). 

Within the architecture of Figs. 1 and 2, services may be divided between the NOC 
4 and the local cable headend 170, ISP 4, and/or corporate proxy server 166 to facUitate 
efficient operations. For example, as shown in Figs. 2A-2B, by appropriately 
configuring one or more routers, it is possible to distribute fimctionality between the 
20 NOC 4 and the local server at, for example, the ISP. Referring specifically to Fig. 2A. 
where the maU server 201 is coupled to a first hop router 202 maU fiom the ISP may be 
returned directly back to the user over, for example, dial-up link 12. This result is 
achieved because router 202, being a first level router, knows that the IP address 
assigned to the terminal device has local significance. Because the IP address has local 
25 significance, the router 202 is able to return the mail request directly to the terminal 
device 2. Since mail requires a relatively low bandwidth, it is often more efficient to 
include a local mail server direcUy at the ISP. However, as shown in Fig. 23, by 
configuring the mail server at the second level router where the IP address does not 
have local significance, it is possible to configure the local ISP, corporate proxy server, 
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or cable headend such that all of the mail requests are returned via the NOC 4. 
Similarly, as shown in Fig. 2A, it may be desirable to configure FTP, WEB, and NEWs 
servers to be connected to one or more second level routers so that these requests are 
returned to the user via a high speed satellite (NOC) retum path. Further, the user may 
even specify the address of the mail, FTP, WEB, NEWS, etc., servers to be those of the 
NOC 4. 

As an alternate configuration, the local ISP may configure all mail requests to be 
retumed to the asymmetric users via a satellite communication download. As discussed 
above with respect to Figs. 2A, 23. the transfer of E-mail to the user over the modem 
is accomplished by connecting the mail server to the first hop where the local address 
of the user is known. In this way. a request to the first hop router knows that the user 
is directly connected to it and sends the mail request back to the user across the 
28.8/56K modem. Alternatively if the mail server is connected to a different router, 
e.g., a second-hop router within the ISP. the mail will be retumed back to the user via 
his retum address which, in the case of an asymmetric user, may belong to the network 
operations center 4. This routing occurs where the second level router does not know 
the user since the user is not directly connected to the second level router. The 
configuration where the maU is retumed to the user via the 28.8/56K modem is shown 
in Fig. 2A where the ISP has the SMTP mail server connected directly to the router 
which then is connected directly to the user. 

An alternate configuration is shown in Fig. 23 where the user is connected through 
a first router 202 to a second router 203 which may be configured to host the SMTP 
mail server. Requests coming in &om the terminal 2 pass through the first router 202, 
through the second router 203. into the SMTP mail server, back out to the second router 
203 and across the Internet 3 since the source address of the user is not known on the 
second router 203 and therefore is transmitted back across the Internet 3 to the NOC 4. 

As shown in Fig. 2A, the same configuration feature discussed with regard to Fig. 
23 may be utilized for an FTP server. By connecting the FTP server to the second level 
router within the ISP, user requests to the FTP server are input through router 1 and then 
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through router 2. The FTP server then sends the response back out over the Internet 3. 
through the NOC 4 and then back through the satellhe to the terminal 2. In addition to 
the FTP, the web and news server may also be coupled to a second level router or 
above, such as a third or fourth level router. 

The second level router 203, may be considered an Internet router. By configuring 
the FTP server, web server, and/or news server to a second level or higher router, all 
requests to these servers may be routed over the Internet and back to the terminal 2 via 
the NOC 4 and satellite transmission link. Alternatively, where the FTP web and/or 
news server is connected to the Rl router 202, then the user request may be returned to 
the user over the modem comiection, e.g. 28.8/56K link. A further configuration is to 
have a duplicate news server, one on the first level router and one on the second level 
router. Tliis configuration allows the ISP to serve two types of users: I) a asymmetric 
connected user and 2) a user configured for conventional access. Additionally, this 
configuration allows the user to make alternate designations of an active news host so 
that the tenninal device 2 can either receive downloads via the modem for news groups 
or downloads via the satelUte link. In this manner, the user can select a highspeed 
access at which may be charged on a per bit basis or, for other matters, the user may 
select a slower access via the 28.8/56K modem for browsing at a slower speed. The 
choice of multiple connect options and multiple mail and/or other server options may 
appear as an option on the Internet browser select screen. For example, the Internet 
browser may automatically select a news server located at the second hop for binary 
picture files while selecting a news server located at the first hop for textual news 
groups. Alternatively, the user may configure the browser to select one of a plurality 
of predefined communication paths to deliver various services. When a user selects a 
news group, the user is prompted to select an appropriate connection cable, satellite. 
ISDN, PSTN, and may also be provided with the lowest cost rate for selecting the 
appropriate selection. 

Figs. 3-4 show two additional embodiments of the asymmetric access system 1 . In 
Fig. 3. a corporate LAN 25 may be configured to include one or more symmetric 
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terminal devices 26A coupled to a corporate LAN 25. The corporate LAN 25 may also 
include a terminal device 2 which may, for example, be configured as a proxy server 
providing Internet connectivity to the LAN 25. The temiinal device 2 may be 
configured as an asymmetric satellite devices as described in the aforementioned 
embodiments. In this manner, Internet requests from any of the symmetric terminal 
devices 26A-26N may be routed to the terminal device 2 and thence over the Internet 
3 to, for example, a remote Internet host 5. Responses to requests initiated by the 
terminal devices 26A ... 26N may be returned through the NOC 4 and the satellite 6 
back to the terminal device 2. Thereafter, the terminal device 2 routes the response to 
the appropriate terminal device 26A-26N across the corporate LAN 25. 

Fig. 4 shows yet another configuration of the asymmetric satellite information 
system. In Fig. 4, a cable headend 30 may include one or more terminal devices 2 
coupled to a cable network 33 via one or more devices such as multiplexer 32 and LAN 
11. Multiplexer 32 may also accommodate a plurality ofcable program feeds 31. The 
LAN 11 and multiplexer 32 may be alternatively configured such as by using a QAM 
scheme. The cable network 33 may be coupled to one or more settops 39A-39N, which 
may or may not include a satellite feed for diiectiy receiving Intemet data from the NOC 
4. For example, in the illustrated embodiment, settop 39A receives Intemet via tiie 
headend 30 whereas settop 39N receives Intemet via a local satellite dish 39N. 
Similarly, PC 40 may be direcUy coupled to the cable networic 33 via an internal MPEG 
II decoder card. PC 40 may receive Intemet access and/or cable feed via tiie MPEG II 
decoder card. PC 51A may also include a MPEG II decoder card which may be 
configured to use the same MPEG n decoder for both satellite based 
channels/information as well as cable network 33 based channels/information. The 
utilization of the same MPEG II decoder and/or tuner(s) for both cable and Intemet 
based services on a single circuit card saves significant resources. Additionally, tiie 
combination of tiie two feed streams allows easy program coordination between tiie 
Intemet feeds and Program/information feeds. 
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The upstream path from the cable head-end 30 may be via the data link 12 and/or 
through one or more direct dedicated lines to the NOC 4 such as by using a VSAT 
channel to directly connect to the NOC 4. In this manner, the cable head-end need only 
provide 28.8K, 56K or 64K of upstream bandwidth from the cable modems to the 
Internet 3 while still providing high speed downloads to customers via an asymmetric 
channel from the NOC 4. 

Fig. 5 shows a system similar to Fig. 4 with the exception that broadcasts are made 
direcdy to devices connected on the cable network. 

Fig. 6 shows that each of the aforementioned embodiments (as well as subsequent 
embodiments) may utilize microwave transmission systems instead of satellite 
transmissions. Tlie return path may be via the Internet, or directly to the NOC 4 via the 
PSTN or other data network. 

Referring to Fig. 7, a detailed description of the NOC 4 is provided. User requests 
may be transmitted across the public switch telephone network 12 through the ISP 13 
across the Internet backbone 21 and into the NOC 4 at the backbone router 53. nie 
backbone router 53 may interconnect a plurality of components such as an access server 
54, a modem pool 55. a series of asymmetric dial up lines 57. and a series of 
conventional dial-up lines 56. Each of these components represents local Internet 
access 118 for subscribers local to the NOC and/or a leased line (e.g.. a fiber, Tl or T3 
line) for comiecting busmesses located near the NOC 4 (e.g., businesses in the same 
city). In this manner, the NOC 4 may provide local Intemet access via conventional 
local Intemet access dial up lines 56 or via highspeed asymmetric dial up lines 57. In 
this way the costs of the NOC 4 may be amortized to provide local ISP support at the 
location of the NOC with litUe or no additional expense. Thus, hardware at the NOC 
4 may be utUized to provide access for remote users. Accoidingly, it may be desirable 
to locate the NOC 4 near cities with populations in excess of 1 million people to 
achieve the maximum utilization of the NOC 4. 

-Hie switch matrix 60A and 60B may be coupled to the backbone router 53 and may 
be configured to provide connectivity to a plurality of different devices utilizing a high 
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speed data access, for example, 100 megabit/Fast Ethernet connections and/or a fiber 
optic network (e.g., FDDI). For example, the switch matrix 60A, 60B, may be coupled 
to a leased line router 1 1 7 which, in turn, may be coupled to one or more fiber and/or 
satellite based leased line customers such as VSAT customers across link 123. Thus, 
the NOC 4 may also be utilized to service VSAT connected customers. 

Additionally, other services may also be coupled to the backbone router 53 through 
the switch matrix 60A. 60B. TTiese seivices may include a server farm which may have 
a plurality of servers interconnected using a highspeed data connection, e.g. 100 
megabit per second Fast Ethernet and/or a FDDI connection. 

The switch matrix 60A, 60B may be located at a central location in the design. 
Where the switch matrix 60A. 603 is located in a central location it may be desirable 
to configure the switch matrix in a fault tolerant manner. For example, each of the 
switch matrix 60A and 60B may be configured redundantly such that switch 60A may 
take over for switch 60B and such that each of the switches 60A and 603 has separate 
redundant power supplies and other backup power supply arrangements. TTie server 
farm may be configured to include a plurality of servers, each interconnected via 
highspeed data links such as 100 megabit per second Fast Ethernet and/or a FDDI 
connection. The seivers may be variously configured to include a DNS primary server 
62, a DNS secondary server 63, and SMTP server 64, a web server 65. a proxy server 
66, a video server 67. a news server 68, a mirrored FTP server 69, and/or multicast 
server 70. 

The DNS servers 62 and 63 may be configured as redundant domain named servers 
(DNS) the DNS servers 62, 63 may be configured to translate domain names such as 
"cnn.com" to a particular IP address, rettiming an IP address to the terminal device 2 
in response to a particular domain name request The domain name server is preferably 
located at the local ISP 13 for use with remote ZakSat subscribers. However, a domain 
name server 62, 63 may also be located in the NOC 4 for local ZakNet subscribers 56 
and conventional dialup subscribers 57. Alternatively, each of the individual ISPs 
distributed throughout the coverage of the satellite may also utilize the DNS primary 
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and secondary server 62, 63 in the NOC 4 in the event that DNS servers at the local ISP 
are fault>'. Thus, the DNS servers 62, 63 in the NOC 4 may provide a back-up function 
for the local ISPs 13, mini-ISPs 168, corporate servers 166, and/or cable head-ends 170. 

In addition to the above functions, the DNS primary and secondary server 62, 63 
may also provide functionality to the other servers and devices in the network 
operations center in the following manner. Local users at the NOC 4 may use the 
domain name server 62, 63 across LAN 77 for local access. TTie domain name servers 
62, 63 are not normally used by users of each of the individuals ISPs. Normally, in the 
asymmetric satellite system according to the invention, local temiinal devices 2 transmit 
a request of "cnn.com" to the local DNS server at the ISP. TTie local DNS server, for 
example, DNS I, performs a translation of the address "cnn.com" into an IP address and 
then issues the request to the translated IP address across the Internet For local ISPs 
which lack sufficient resources, one and/or both DNS servers may be located at the 
NOC 4 with the translations being sent back to the local ISP so that the user request 
may be forwarded to the destination Internet host 5 such as "cnn.com". 

Again referring to Fig. 7, the SMTP server 64 may be a conventional mail server. 
The SMTP server located at the NOC 4 may only be used for users connected directly 
to the NOC 4. Mail seivers for remotely located Internet users may be located at the 
local ISP 13 such that mail requests at the local ISP 13 are conveyed back to the 
terminal device 2 via the pubUc switch telephone network 12. In this way, mail requests 
which are normaUy of a small size and do not consume a large amount of bandwidth are 
easily transmitted back to terminal device 2 via the public switch telephone network. 
This allocation of the mail server is performed by entering the mail server address 
corresponding to the local ISP. in the appropriate Internet mail software. However, as 
discussed above with respect to Fig. 2B, mail requests may also be returned via the 
NOC 4. 

Thus, the asymmetric satelUte system may be configured to utilize the satellite path 
for certain sets of services such as FTP and HTTP access and to utilize the local modem 
return path for lower bandwidth requirement services such as SMTP mail. 
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A proxy server may be included in the ISP and ftmction as either a firewall or to 
provide caching to the local subscriber. For example, the proxy server may provide 
censorship of the data coming from the Internet such as by screening inappropriate 
material as is well known for proxy server software. 

In exemplary embodiments, the proxy server receives requests from any of the 
terminal devices 2 (e.g., devices coupled to local dial-up links 56, 57, leased lines, 
and/or remote terminal devices 2). Tliereafter, the proxy server may initiate a requesi 
over the Internet and reply with a response back to the local server. The proxy server 
is configured such that all of the temiinal devices 2 connected to the proxy server have 
significance to the proxy server. Thus, the proxy server knows where to return data 
collected from the Internet The proxy server may also provide cache services for 
storing frequently accessed web pages for terminal device 2 and every other terminal 
connected to the ISP which also accesses a similar web page. 

For some embodiments, proxy servers may require some additional setup and/or a 
script files in order to configure the Internet Bowsers appropriately. 

Where the asymmetric satellite network is configured to operate using the proxy 
server for remote terminal devices 2, it may be desirable to configure the terminal 
devices 2 with an IP proxy address not of the proxy at a local ISP but of the proxy 
address of the proxy server in the NOC 4. In this manner, proxy requests made from 
the local terminal 2 are input into the ISP and out over the Internet 21 to the NOC 4 and 
then to the proxy server 66. The proxy server 66 can then initiate a request over the 
Intemet to an Internet host 5. such as cnn.com Thereafter, the request may be returned 
to the proxy server 66 and thereafter sent out over the satellite 6 back to the individual 
terminal 2. 

The proxy server can be configurable within the NOC such that a plurality of proxy 
servers are provided and the load distributed among the proxy servers. TTus may be 
done by configuring each of the individual terminals with a different proxy address or 
by including a load balancing server coupling a plurality of the proxy servers. TTie load 
balancing server may be variously configured and may include a CISCO load director. 
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The proxy servers ™ay also be co,^g„ed .0 confonn ,0 ce„s„.h.p requirements in 
each „d,vidua, 00^,^ ,eh fta, proxy server A only provides mareda, U,a, would be 
su„able for viewing in Iran, „he„as proxy server B provides matedal ,ha, would 
suitable for viewing in Saudi Arabia, or Singapore. 

In ye. anoU,er alternate configuration, tenninai device 2 ntay serve as a proxy server 
.0 acconunodate a plur^ity of different users. The different users may be directly 
comtected ,0 the tennina, device 2 via a plurality of modems (e.g., a modem bank, 
and/or connected to the terminal device 2 via a LAN 25 having a number of comtected 
pet^n^ computers or other computing platfomts 26A such as a network computer ,n 
thts manner, the terminal device 2 may serve as a mini-ISP. 

Fig. 8. 9 show various VSAT solutions which allow the use of the same and/or 
d-fferen, satellite antenna faciUties ,0 be utilized for bod, Internet and normal VSAT 
—cations. Refening specifically ,0 Fig. 8, where the NOC 4 (e.g„ as shown i„ 
F.g. 7) is coupled ,0 a VSAT hub 1 18. .he VSAT networi. (e.g., chamtel A) may be 
uhl«edas.here«m,pafl,„theN0C4. In this manner a remote connect^ ,SP cable 
headend, and/or conx,m,e Interne, server 122 need not have any connection'to the 
lm«net 21. The "back channel" for the asymmetdc access may be via a VSAT 
comtection »ith the fonvard channel provided using standard asymmetric transfer 
techniques as described hereit. V^. i, is possible to locate ISPs in very remote 

regions such as inIndia«,dChina without regarf to the reliability ofleased lines and/or 
even the telephone syst«n. For example, it is possible to instaU the Internet server 122 
m a corporation, cable head-end. aad/or ISP in a remote rcgiot. Where connection to 
.he totemet server 122 is via cable and/or a LAN, then= is no need to utUize the local 
telephone network. Additionally, the same satellite dish may be utilized for both VSAT 
and asymmetric s«elUte services, reducing the cos. of d,e VSAT connection One 
example of a system utilizing Ae s«vices of Ws embodimen, would be an apar«,«« 
burldmg or con>oration Ioca«d in a remote area or in an area witi, unreliable .elephone 
servtce. n,e upsueam chamiel is provided by channel A which may be a slow speed 
64Kbps channel. TTus channel may be dedica,ed to one VSAT terminal or distributed 
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among a plurality of VSAT terminals using a TDMA and/or packet based distribution 
scheme. In any event, the upstream channel may be relatively slow speed and have a 
relatively low cost. However, the downstream link (e.g., channel C) may be shared 
among many temiinal devices 2 and may include many services such as Internet and/or 
multicast multimedia events such as pay-per-view movies and/or television 
programming. TTie cost of the downstream channel is shared among many users such 
as ISP's 13 (with or without asymmetric users) and/or cable networks 33. Thus, a 
highly autonomous system has been established. 

Referring specifically to Fig. 9, the concept of a personal earth station disposed at 
a plurality of remote locations such as corporations and/or apartment buildings is 
shown. The personal earth stations may be configured as proxy servers, cable head- 
ends, and/or as conventional ISPs. It may be desirable to co-locate the VSAT hub with 
the NOC 4. Where the VSAT hub 118 is co-located with the NOC 4, many remote 
VSAT connected installations will only require a single hop to reach the NOC 4 tiius 
reducing the latency time associated with an Internet access request. Further, co- 
location allows for easy TDMA and/or packet based access systems to be utilized 
minimizing VSAT transponder costs. 

In any of the aforementioned embodiments, caching circuitry may be added to 
improve perfomiance. For example. Referring to Figs. 7 and 10, the caching circuitry 
in tiie ISP and/or the NOC 4 may function as described below. A user from, for 
example, terminal 2 issues a request to ISP 13 via any suitable mechanism such as a 
public switch telephone network into modems and tiuough one or more routers 50. A 
determination is made whether the request is being made from a asymmetric access user 
or via a conventional Internet user. TTie determination between a conventional Internet 
user and a asymmetric Internet user is based on a policy-based routing scheme which 
may look at factors such as the source address of tiie IP packet. If tiie source address 
of tiie IP packet is from an asymmettic user, the request may be examined to determine 
if Uie requested information is in the master cache facility 116. If tiie requested 
information is in the master cache facility 1 1 6. then tiie slave reader 5 1 may forward tiie 
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request to the NOC 4. The NOC 4 may then pass the request through the master reader 
1 1 5 into the main master cache 116, back out through the master switch matrix 60A, 
60B. the router 53, across various gating circuitry to satellite 6. The request may 
thereafter be forwarded to the satellite receiver of terminal device 2. The request may 
also be forwarded to optional cache 52 of the ISP 13. If the request from terminal 2 is 
determined by slave reader 51 not to be in the master cache, then the slave reader 51 
may initiate a request across the Internet 21 to Internet host 5 with the return IP address 
directing the packet back to the NOC 4 (including optional caching in the master cache) 
which thereafter fonvards the packet via satellite 6 back to terminal 2, and/or ISP 13 
including optional cache 52. 

Alternatively where a normal Internet user 40 is comiected to the ISP 13, slave 
reader 5 1 determines if the request for the normal Internet user is in optional cache 52. 
If the request is in optional cache 52, the request is immediately downloaded to the 
normal Internet user 40. 

Another option is to bypass requests for conventional users directly to the Internet 
and have the reply returned via land lines or high speed asymmetric satellite lines 
(depending on whether aNOC IP address is used or an IP address of the ISP is used). 

If the request is not in optional cache 52. the slave reader can determine whether the 
request is in master cache 1 16. If the requested information is in master cache 1 16, the 
slave reader may initiate a request through router 53, switch matrix 60A, 60B, to m^r 
reader 1 15 to supply the information fix>m master cache 1 16 back through the NOC 4 
out to satellite 6 and back to receiver 51A of the slave reader 51. TTie data may 
thereafter be cached in optional cache 52 and/or supplied directly to the symmetric 
Internet user 40. Note that in this system, the local cache is optional and need not be 
included. Where the requested infomiation is not in the local cache or the master cache, 
the request may be bypassed to the Internet and returned back to the user via the ISP. 
■niis option may be best utilized where the ISP is a mini-isp (such as ISP2 in Fig. 2 or 
Corp I 166 in Fig. 2) and/or where the ISP is configured as a proxy server, with each 
of the users being configured to utilize the proxy server. 
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Alternatively, where the local cache 52 is included, the local cache may be updated 
via downloads from the master cache 1 1 6. The NOC 4 may use unused bandwidth on 
the satellite to periodically update the local caches 52 for a plurality of Internet service 
providers as certain popular pages change such as weather pages or newspaper pages. 
Thus, a single multicast transmission may update all of the cache facilities 
simultaneously. In other embodiments, the entire master cache facility may be 
replicated at the ISP optional cache. 

The caching concepts described herein may be utilized to eliminate the bottleneck 
at each of the points-of-presence on the Internet and create a virtual Internet in the main 
caching facility 1 16 consisting of many terra bytes. In this manner, a complete mirror 
image of the Internet may be created at the NOC such that all of the popular pages may 
be downloaded immediately, thus vasUy reducing the amount of traffic on the Internet 
and reducing the costs of the ISP to maintain a large pipeline connection to the Internet. 
Large databases may also be contracted to provide content to the main caching facilities 
and create mirror sites on the NOC master cache 116 such that database requests may 
also be served directly from the NOC 4. Such popular sites as Tucows and/or IBM 
patent server may be mirrored by mirroring the databases and associated software. 
Additional details of the cache facility are provided below. 
Figure 7A provides a simpUfied version of Figure 7 with particular emphasis on the 
caching circuitry. In particular, the ISP 13 may include the slave reader 51, optional 
cache 52. router/switches 50, and a multicast client 58 with an optional filter facility 
58B, and a sateUite receive antenna 23. Coupled to the ISP 13 may be a plurality of 
symmetric Internet users 40. a pluraUty of asymmetric Internet users 2. and/or a plurality 
of corporate symmetric or asymmetric Internet users including routers/switches 50B, 
a corporate LAN 25B, slave reader 51B, optional cache 523. a multicast client with 
optional filter 58B, and/or a receive antenna 23B. The ISP 13 may be coupled to the 
NOC 4 via the Internet 21 or other suitable mechanism discussed above. As shown in 
Fig- 7A, a simplified diagram of the NOC 4 may include a plurality of 
routers/gateways, such as Cisco backbone (core) router 53. switch matrix 60A, 60B, 
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gateways 92, 93, remultiplexer 95 and various output devices such as modulators, 
switches, and other devices. A multicast server 70 may be coupled to the various 
router/gateways and/or to the master reader 115 and associated master cache storage 
116. 

5 The output of the NOC 4 may be distributed via satellite 6 to the various receivers 

23, 23B, and 23C. A plurality of non-Internet connected devices such as PC 40D with 
multicast client/optional filter 58D and local cache facility 52D may also receive 
satellite transmission 6. For example, a corporate user may be connected via satellite 
receiver 23C, multicast client/optional filter 58C, corporate server 59, optional cache 

1 0 52C, corporate LAN 25C, and/or PC 40C. The stand alone PC 40D and/or corporate 
user 59 may receive multicast transmissions and download only selected data via 
multicast client with optional filter 58D. In this way, the stand alone PC 40D and/or 
corporate server 59 may collect certain information in accordance with the filter and 
supply that information thereafter to one or more users connected to PC 40D and/or 

1 5 corporate server 59. 

Various features of the system shown in Fig. 7A may be described as follows. The 
slave reader 51 and/or 5 IB a complete index of all pages and/or data stored in master 
cache 1 16 and/or associated slave caches 52, 52B. The cache index or table stored in 
slave reader 5 1, 5 IB may contain a complete index of the contents of the master cache 

20 116 and/or local optional cache 52, 52B. A determination may be made whether to 
download data fi-om the master cache fecility in the NOC 4 or whether to supply the 
data locally via the optional cache 52, 52B. The asymmetric users may or may not 
utilize the services of the optional cache 52, 52B. Where the requested data is large, the 
services of the master cache in the NOC 4 may be utilized so that the return 

25 transmission may occur via high speed satellite link through satellite 6 back to the 
asymmetric users. Alternatively, the asymmetric users may be supplied with 
information from the local cache facility over the satellite link dependent upon the size 
of the information requested. 
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For example, the ISP router/switches 50 may include a policy-based routing 
protocol client which determines the size of the packets requested in the optional cache 
52 and determines what the optimum return path to the asymmetric and/or corporate 
user would be (i.e.. either satellite or via direct terrestrial download from opUonal cache 
52). For example, if a small packet were requested containing a page with a relatively 
small amount of data, the packet may be downloaded to the corporate user and/or 
asymmetric user direcUy from optional cache 52 via the terrestrial link. However, if the 
policy based routing algorithm determines that the size of the data is over a particular 
threshold value, the corporate user SOB, 59B and/or asymmetric user 2 may be provided 
the data by routing the response through the NOC 4 so that the data may be returned via 
satellite 6. Additionally, the poUcy based routing mechanism may be preinformed with 
the link to either the asymmetric terminal 2 and/or the corporate LAN such that the 
policy based routing mechanism is different depending on the speed of the line to the 
corporate user and/or the asymmetric terminal 2. For example, if the asymmetric user 
utUizes a 14.4 Kbps modem connection, then most likely the return path for any 
substantive size packets would be via tiie satellite link across sateUite 6. However, if 
the connection to the asymmetric user were a multichannel ISDN connection at 128K 
bps. tiien tiie policy based routing mechanism would route a larger percentage of the 
packets up to a higher thitshold back via tiie multichannel ISDN line. Where tiie 
corporate users 50B, 59 are coupled via a high speed link, a greater percentage of 
packets are downloaded via a non-sateUite (terrestrial) link and a higher data capacity 
threshold may be used for tiie requested infonnation in the policy based routing scheme. 

The cache tables are preferably updated after each cache update, or on predefmed 
periods. The cacheTmdex update may be downloaded from tiie NOC 4 via tiie satellite 
link 6 and/or via the Internet connection 21. The updates to tiie index and cache table 
may comprise the entire table and/or an update of a particular portion of tiie table. 
Since the updates are only concerning tiie index entries and not tiie actual data, tiie 
amoum of bandwidtii associated witi, tiie updates is small. Furtiier, periodically the 
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local .ndex and the master index are compared and synchronized using any suitable 
method such as a check sum for other comparison technique. Data in the master cache 
desired by the local cache facility may be downloaded via the satellite 6. Further, the 
local cache may have data from non-asymmetric users stored in its local cache. Thus 
this data may also be utilized for asymmetric users. Similarly, the data stored in the 
cache for symmetric users may be utilized for asymmetric users. 

The initialization of each of the optional caches 52. 52B, 52C, 52D may occur via 
satellite link 6 and/or over the Internet 21. Alternatively, the optional cache storage 
may be synchronized at the NOC 4 such that the complete contents of the master cache 
are copied to the optional cache prior to distribution of the optional cache to the ISP. 
In this mamier, the optional cache is preloaded with the data at the NOC and shipped 
to each of the ISPs to provide an initialization process and save the initial bandwidth 
of transferring many tena bytes of data to the individual ISP providers. ITiereafter, the 
optional caches may be updated periodically via the satellite link 6 and/or Intemet 21. 
Alternatively, the optional cache storage units 52-52D may be updated and/or initialized 
on an as-needed basis such that the caches are increasingly utilized as more requests are 
received and cached. 

Fig. 7B shows an exemplary TCP/IP protocol stack 210 of a client/server. The 
protocol stack is formed layers: the application layer 21 1. the transport layer 212. the 
network layer 213, the data link layer 214, and the physical layer 215. Communication 
between the various layers takes place in accordance with various protocols. For 
example, the communications between the network layer 213 and the transport layer 
212 occurs across port 17, the UDP interface and port 6 of the TCP interface. Further, 
communication between the transport layer 212 and the application layer 21 1 may occur 
using any number of predefmed interfaces. For example, telnet data may use port 23, 
FTP data may use port 21. SMTP data (e.g.,mail) may use port 25, and Usenet News 
data may use port 144. The use of a defined interface within the TCP/IP stack 210 
allows various components in tiie network (such as routers/switches 50) to determine 
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the type of data request being processed. In this manner, special processing can occur 
depending on the type of data request. 

Referring to Fig. 7C, an exemplary flow diagram is provided which provides a first 
exemplary architecnire for implementing the system shown in Fig. 7A. In step 300. a 
decision is made as to the type of user making the request. The user may be either a 
conventional symmetric Internet user or a asymmetric Internet user. The detennination 
as to whether the user is a symmetric or asymmetric Internet user may be made by any 
suitable mechanism such as by the assigned IP address of the user or by the phone 
lines/leased lines upon which the user accesses the ISP. If the user is a conventional 
symmetric Internet user, processing proceeds to step 302. If the user is an asymmetric 
Internet user, processing proceeds to step 301. 

Once a determination is made that the user is a asymmetric Internet user, processing 
proceeds at step 303. In step 303, a determination is made as to the type of user request. 
Many ISP's implement virtual hosting where the ISP hosts their own web sights, 
commercial web sights, customer's web sites, and locally provided content AU of these 
sites are local sites which use the local ISP's or companies local resources. The 
detennination is made via the destination address requested by the user. If the user is 
requesting access to content provided locally by the ISP or corporate server, then 
processing continues 6n step 304. Where the content is provided at other locations on 
the Internet, processing proceeds to step 305. 

Where the requested resources reside locally (step 304). a determination is made 
as to whether the resources reside at a 1« hop router/switch or at a second hop 
router/switch. Where the resources reside at a I« hop router, processing proceeds to 
step 307 and the resources are accessed in jrtep 309. The resources at the first level 
router may be variously configured to include mail services, news services, local web 
resources, and/or local ftp resources. Where the resources are located on a first level 
router, the reply (step 3 10) is typically sem back direcUy to the requesting user via a 
terrestrial link (step 311). Since the resources are on the first level router, the user will 
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have local significance, even where the user is assigned an IP address corresponding to 
the NOC 4. 

Alternatively, where the resources (e.g., mail services, news services, local web 
resources, and/or local ftp resources) are located on a second level router (step 308), a 
determination may be made as to the type of data resources being requested (step 312). 
For example, conventions of the protocol stack 210 (Fig. 7B) may be utilized to 
detennine whether the request is E-mail, Web, FTP, Telenet, News, or another type of 
request. The ISP may be configured to dispose the resources locally (at either the first 
or second level router) or the resources may be disposed elsewhere on the Internet. 
Where the resources being requested are of the type that may be stored in a cache, then 
processing proceeds to step 3 14 where the request may be forwarded to the slave reader 
(e.g., 5 1, 51b). The slave reader may access a cache table or other index to determine 
whether the value requested (e.g., a web page) exists in either the local or master cache 
(step 315). If the requested data is disposed in the cache, the cache request may be 
either forwarded directly to the NOC 4 (step 323) or processed locally based on a policy 
based routing scheme. If a policy based routing scheme is utilized, a check is made to 
deteraiine the size of the requested page (step 320). If the size of the requested page is 
smaller than a predetermined defmed value (step 321). then the requested page is 
returned via the terrestrial link (step 326). 

The predetemiined defmed value varies with the speed of the terrestrial link. For 
example, where the terrestrial link is a 14.4 Kbps modem, the predetermined defined 
value will be set at a low level such that most of the returned data will be via the 
satelUte link. However, where the terrestrial link is a 64 Kbps ISDN link, more of the 
return data wiU be via the terrestrial link. The policy based routing scheme balances the 
longer delay associated with outputting the request over the Internet to the master cache 
in the NOC 4 and the associated high speed satellite dovmload time, with the generally 
low delay, lower speed terrestrial line to determine the fastest path. Additionally, the 
policy based routing scheme may utilize a different path depending on the number of 
concurrent sessions utilizing one path or the other. 
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Where the policy based routing scheme determines that the fastest path is the 
terrestrial link, the data may be pushed back to the first level routers/sun tches and then 
back to the user over the terrestrial link (step 322). Alternatively, where the policy 
based routing scheme determines that the fastest path is the satellite link, the request 
may be forwarded to the NOC (step 323) for processing by the master cache (step 324). 
Thereafter, the data may be transmitted (step 325) back to the user via the satellite link. 

Of course, it is not required that a policy based routing scheme be utilized. For 
example, it is possible to route all requests for particular types of data (e.g., mail, web, 
or news data) directly to the NOC 4 and/or via the terrestrial link. For example, mail 
may always be returned via a terrestrial link and web data always via a satellite link. 

Referring again to step 315, where a determination is made that the requested data 
does not exist in a cache table, the request may be bypassed to the local resources, e.g., 
a local server farm 61 A (step 316). The data from the local server farm may be either 
forwarded directly to the NOC 4 (step 3 1 8) or sent back via the terrestrial link based on 
a policy based routing scheme. If a poUcy based routing scheme is utilized, a check is 
made to determine the size of the requested data (step 371). If the size of the requested 
page is smaUer than a predetermined defined value (step 371), then the requested page 
is returned via the terrestrial link (step 372). Alternatively, if the size of the data is 
larger than a predetermined defined value, the reply from the local resources (e.g., 
server feim 61 A) wiU be sent back to the NOC (step 3 1 7) since the return IP address is 
that of the NOC 4. Where the data is cacheable data such as Web pages, the data may 
be cached in the master cache (step 318) and sent back to the asymmetric user (step 
326). Storing the local data in the master cache at the NOC allows only a request to be 
sent to the NOC 4 for future satellite return accesses to the same data. Simultaneously, 
the data may also be multicast to all ISP's and/or corporate users to update a plurality 
of local optional caches. 

Again referring to step 312, where the data request is not for cachable data, the 
request may be serviced by accessing local resources (step 316), and the processing 
continues as described above with step 371 . Again, a policy based routing scheme may 
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b. .mplcmemcd where the policy based roming scheme determines whete U,e fastest 
path ,s the tetrestrial lin, „. the satellite link based on the cogent traffic pattems the 
assocated delays, the bandwidth of the various links, and dte amount of dau. Where 
.he pohcy based routing scheme det=m,i„es that the fastest path is the terrestrid link 
the data may be pt^hed back to dte ftrst level routers/switches and then back to dte user 
over the terrestrial link (not shown). Alternatively, where the policy based routing 
scheme determines that the fastest path is the satellite link, the data may be forwarded 
.0 the NOC (step 3 17) for processing over dte sateUite link and back to the asymmetric 
user. 

Again referring to step 303, where the resources are located at a remote location 
across the Internet (step 305), a detennination is made as to the type of data being 
requested (step 330). Where .he data requested is cacheable. the data re<,uest is 
forwarded ,o the slave reader 51. 51B (step 332), Where the requested data is not 
cacheable, the request is bypassed to the Internet resources (step 33 1). Since the re»m 

address on .he requestmay be d,eN0C4f„r asymmetric users, the reply is output back 
to the asymmetric user via the NOC 4 (steps 331, 333, 335). 

Where the daa being requested fern a remote interne, site is cacheable, request 
.s forwarded to the slave reader (step 332). He slave reader may access a cache able 
or other index to deteanine whether Ute value requests (e.g.. a web page) exis« in 
etther the local or mas«r cache (step 332). If d,e requested data is disposed in the 
eittier U,e Ioc.1 or master cache, processing proceeds at step 375. In step 375 a 
detennmation is made whether Uk data is located in the optional local cache. If there 
.s no local cache, or if Ute date is no, in the local cache, processing continues at step 
337. Where the data is in the local cache and the master cache, a policy based routing 
scheme may optionally be utilized to detemtine how d,e request is proces«d. If a 
pohcy based routing scheme is uUlized, a check U made (step 376) u> detemune the size 
of the requested data. As described above, if the size of fte requested data is smaller 
than a predetemtined defined value, then the tequested page is remmed via the 
•etrestrial link (step 377). If the size of the requested data is larger than the 
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predetermined defined value, processing proceeds to step 337 where tiie request is 
forwarded to the master reader of the NOC 4. The data is thereafter retrieved from the 
master cache (step 339) and sent via the satellite (step 340) back to the asymmetric user 
(step 344). 

Referring again to step 336, where a determination is made that the requested data 
does not exist in a cache table, the request may be bypassed to the Internet (step 338) 
with the reply being sent back to the NOC (step 341) since the return IP address may 
be that of the NOC 4. Where the data is cacheable data such as Web pages, the data 
may be cached in the master cache and/or sent back to the asymmetric user (step 342- 
343), with optional caching in the local cache. Storing the data in the master cache at 
the NOC 4 allows only a request to be sent to the NOC for future accesses to the same 
data. Simultaneously, the data may also be multicast to all ISP's and/or corporate users 
to update a plurality of local optional caches. 

Again referring to step 300, conventional Internet users (step 302) may also be 
served by the same cache resources that are used for asymmetric Internet users. For 
example, where the data requested by the user is not cachable, the requests will be 
processed by the local resources and/or output to the Internet resources for servicing 
(step 351). Responses from either the Internet resources or local data are returned to 
the user via the terrestrial link (steps 352-353). 

Where the resources requested by the user arc cacheable, the requests may be 
forwarded to the slave reader (step 354). The slave reader determines whether the 
requested information is in the local optional cache. If the requested data are stored in 
the local optional cache, the data may be output to the conventional user via the 
terrestrial link (steps 356-357). Where the resources are not stored in the local cache, 
the requests may be output to the Internet (step 358) with the return address of the 
conventional Internet user via, for example, the ISP. The reply data may be sent back 
to the ISP or corporate account, and optionally stored in the optional slave cache (step 
359) and output to the conventional user along terrestrial links (361). 
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As a further option, the asymmetric satellite system need not include a local cache 
at the ISP or corporate site. Where the optional cache is not included, it mav still be 
desirable to include the slave reader which maintains the table of the contents of the 
master cache which is replicated via either the Internet and/or a satellite download from 
the NOC. The replica of the master cache stored at the slave reader allows the slave 
reader to determine the contents of the master cache and to make a determination of 
whether to forward the requested page, packet or data request to the Internet host or to 
the NOC 4 for processing. Where the data is resident in the master cache, the slave 
reader may forward the request to the NOC 4 for processing by the master reader and 
master cache. The use of a slave reader at the ISP, as opposed to the incorporation of 
an entire cache facility, can provide significant cost savings while still maintaining the 
same through-put and centralizing all of the cache facilities at the NOC 4 for speedy 
download to each of the sites. In this manner, only a small request packet need be sent 
from the ISP or corporate site to the NOC 4 and the amount of data going across the 
Internet is reduced considerably. Accordingly, the cache configuration in accordance 
with the embodiments of the present invention has significant advantages over 
conventional cache designs. 

Referring to Fig. 7D, a block diagram is shown concerning how the various 
configurations shown in Fig. 2 are implemented using the caching designs as discussed 
above. For example, the mini-ISP model 168, 1 69 and/or the corporate model 166 may 
be implemented as shown in Fig. 7D, in accordance with the discussion above 
FILTRRTNfi 

An optional configuration for the present system is the inclusion of a multicast 
client with optional filter 58, 58B, 58C, and 58D m Fig. 7A. TTxe multicast filter may 
be variously configured depending on the particular application. Conventional 
multicast systems predefine which contents will be broadcasted and the time of each of 
these broadcasts. In conventional multicast systems, the user is provided with an 
amiouncement or schedule of upcoming broadcasts and is not preinfomied as to the 
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contents of those broadcasts. The user is only provided with information that the 
broadcast ,s for his particular station. By contrast, the present multicast filter is a highly 
sophisticated client which provides selective screening of muhicast data, such as 
multicast web pages, from the NOC to each of the individual ISPs and/or corporate 
users. For example, the multicast filter may be utilized in countries which do not permit 
certain types of content in the same manner that proxy server software is utilized 
currently. Accordingly, the ISP or coiporate user may filter pages and/or data which 
has been requested by a user and returned via the NOC 4 at the ISP incoming site. In 
this manner, a selective screening of data may be accomplished by the ISP and/or 
corporate site using the multicast filter. Additionally, the mulucast filter may be 
utilized to cache selective contents being multicast from the NOC 4 into the local cache 
of the ISP and/or coiporate user. Each of the individual ISPs may also selectively store 
content based on the site from which the content originates and/or based on the contents 
itself For example, the multicast filter may read data and web pages as they are being 
broadcast from the NOC 4 and received in each of the ISPs and/or corporate users 
and/or temiinal devices 2. The multicast filter may screen for certain types of web 
pages and/or other content so that a selective cache of specific search enabled content 
is stored locally. 

The present multicast filter may be completely different from conventional surf- 
watch or other type programs which simply block the contents of incoming pages based 
on particular key words or addresses. In contrast, the present system is designed to scan 
multicast transmissions which are accompanied by multicast IP addresses. The 
multicast transmissions have multicast addresses which are associated with a particular 
multicast group. Users at the receive site, such as ISPs and/or coiporate users, are 
assigned to a plurality of multicast groups. The filter is preferably enabled on the 
receiver end of the multicasting client. The multicast receive filter allows blocking of 
incoming data based on source address, domain name, and contents of tiie particular 
pages. Additionally, the filter may also block particular news groups which are 
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objectionable in cenain countries, such as binary picture file news groups. Further, an 
individual user may alternatively program a filter to select particular web pages and/or 
data that the user is interested in from the multicast transmission of the NOC and cache 
this data for later viewing. The multicast transmission of cached updates to each of the 
5 slave caches is a significant advantage over conventional cache systems. 

The multicasting to each of the individual ISPs allows each of the individual ISPs 
to have a much slower connection to the Intemet backbone. In this manner, each of the 
ISPs may have a very low speed connection to the Intemet backbone and yet be updated 
at a very high rate via the NOC for both conventional or non-conventional asynunetric 
1 0 users. Accordingly, the ISP may save significant costs in its connection to the Intemet 
for both symmetric and asymmetric users and still utilize the same cache for both users. 
With respect to the slave readers, the slave readers even vwthout caches may be 
distributed across the entire Intemet and synchronized with the master cache. In this 
manner, the distributed hierarchical architecture allows each of the ISPs (e.g., mini- 
1 5 ISPs) to have a low speed Intemet connection and still sendee their users at a very high 
speed. Accordingly, an ISP may have an extremely low start-up cost and yet service 
a large number of conventional symmetric Intemet users via the use of an asymmetric 
satelUte download directly to the ISP. In this manner, the Intemet service provider may 
have a very low speed connection to the Internet, e.g., a 56 kb/s modem connection, and 
yet respond to requests at a very high speed via an asymmetric satellite connection. 
Accordingly, the total cost for an Intemet service provider start-up may be only a few 
thousand dollars. Additionally, kits may be sold which allow an Intemet service 
provider to start up with virtually no cost other than a server, a few phone lines, an 
asymmetric satellite receiver, and a single phone and/or VSAT connection to the 
25 Intemet. 

Multicast 

Multicast is a broadcast from one location to a plurality of locations (one to many). 
Multicast over the Intemet may occur using one or more of the following protocols: 
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IGMP protocol (i.e., Internet Group Management Protocol), IP multicasting protocol. 
XTP (express transfer protocol). MTP (multicast transpon protocol), and/or ST-1 1 
protocol. The multicast server 70 (Fig. 7A) may be present in the NOC 4. Starburst 
Communication Corporation has an existing client application which may be executed 
on terminal 2 and allow for multicast services to be provided over the Internet or via the 
NOC 4 to each of the individual terminal devices 2. Additional multicast clients may 
be provided by Lucent corporation. The multicast clients may be modified to operate 
in the asymmetric system as described below. 

The client application runs on tenminal device 2. The multicast server may be 
disposed in the network operations center 4. Internet class D IP addresses are reserved 
for multicasting. Accordingly, conventionaUy only Internet service providers or 
terminal devices having a class D IP address may receive multicast transmissions. 

The multicast server 70 operates using a comiectionless protocol such as user 
datagram protocol. In this manner, the multicast server may send out amiouncements 
concerning the contents of upcoming multicast broadcasts. The amiouncements may 
also include a predetemiined class of usei. so that only a certain subset of the users may 
receive the multicast program. Alternatively, the multicast program may be directed to 
all users. For some classes of multicast service, each of the users at the individual 
terminals 2 must register with the multicast server in order to be enabled to r^ive the 
multicast transmission. 

In other classes of multicast service, the users at the individual terminals 2 and. for 
example, stand-alone terminal devices not comiected to the Internet do not require 
registration. For terminal devices with no back channel to the NOC 4, the integrity of 
the data download is ensured by repeating the transmission of the data a number of 
times such that the statistical probability of the earth station without a back chamiel 
receiving all of the data packets correctly is very high. Alternatively, any suitable error 
correcting protocols may be uUlized. For some types of data, such as video data, some 
embodiments may utilize no error correction scheme. Alternatively, were a back 
chamiel exists and the UDP protocol is utilized, each of the individual PCS at the end 
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of the transmission may request retransmission of one or more particular ones of the 
data packets. 

Conventionally, the multicast server has not been utilized over satellites, and in 
particular, over asymmetric satellite systems. The concepts in accordance with one or 
more aspects of the present invention is to incorporate the multicast server directly in 
the NOC 4 and connect each of the individual terminal devices 2 to the multicast server 
via the Internet and a specialized application running on each of the individual terminal 
devices 2. 

Accordingly, data from the multicast server may be switched through switch matrix 
60A, 60B through backbone router 53, and through one or more gateways 90. Each 
gateway may deiiver. for example. 12 megabits per second or more of data. In 
exemplary embodiments, the NOC 4 may be configured to include three or more 
gateways which may be suitable for 36 megabits per second or more of data. Additional 
gateways may be added and/or existing gateways upgraded. Further, additional space 
segment may be purchased as the system increases, providing a modular and flexible 
system to expand as the user base increases. 

The gateways 90 may, for example, be utilized to encapsulate the multicast data 
(e.g., data from a Starburst multicast server data or other conventional multicast seiver) 
into MPEG-2 encapsulated data which may thereafter be transferred through 
multiplexer 95, modulated on QPSK modulator 1 00, and output through switch 1 02 and 
uplink 1 6. The uplink 1 6 may either be multicanier per channel MCPC or single carrier 
per channel SCPC. Additional improvements in the multicast server system (e.g., a 
Starburst or Lucent server) include the provision for a plurality of multicast sessions 
ruiming on a single multicast server. 

For example, referring to Fig. 11, a multicast server farm 600 may include a 
plurality of multicast sessions (e.g., multicast 1 through multicast 5 601-605) hosted on 
either a single server 606 or on a plurality of servers 606-607. Each of tiie multicast 
sessions may have individual control modules 610-614 for controlling each of die 
individual multicast sessions and may also include one or more global control modules 
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615. The global control modules 615 may be variously configured to control the 
interaction between the different multicast sessions 601-605 and allocation of the 
different multicast sessions between diflferent multicast servers 606-607. For example, 
the global control modules 615 may include a bandwidth control module 616 and an 
5 announcement control module 617. The announcement control 6 1 6 may define the 
type of multicast data being broadcast by a particular multicast session and the 
bandwidth control 616 may allocate the different mulitcast sessions among the different 
multicast servers and/or determine/track the bandwidth which may be utilized by each 
of the multicast sessions and/or multicast servers. 

1 0 Although the multicast server farm 600 may be controlled in a central location at. 

for example, the NOC 4, it may also be desirable to have distributed control. For 
example, particularly with regard to the individual control modules 610-614, it may be 
desirable to control these modules utilizing one or more remote terminals 40A using, 
for example, remote terminal access software 609. In this manner, each of the 

1 5 individual multicast server appUcations (e.g., multicast session M) running at the NOC 
4 may be controlled locally from a remote entity (e.g., a corporation, hotel, apartment 
complex, community, campus, or school car dealership, franchise) having a terminal 
device 40A. The remote entity may locate tiie terminal device 40A at any suitable 
location within tiie remote entity such as tiie corporation's head office, front desk, 

20 and/or network control center or other telecommunication centers for the remote entity. 
In this manner, a remote entity can utilize tiie asymmetric nature of die current satellite 
transmission infrastructure to update databases tiiroughout a remote entity's network 
at each of tiie local terminal devices 2. Each of tiie remote control devices 40A need 
not necessarily receive tiie multicast broadcast and tiierefore does not necessarily have 

25 to be an asymmetric device. However, it may be desirable for tiie remote control 
devices 40A to monitor tiie broadcast being broadcast by tiie multicast server to verify 
data integrity. 

Conventionally, tiie multicast server 606, 607 was controlled via a terminal adjacent 
to the physical multicast server. For example, tiie global control module 615 may be 
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implemented in one or more control terminals located in the NOC 4. However, as the 
muhicast server configuration is integrated into the NOC 4, it is less desirable to have 
a different company representative and/or operators control each multicast server. 
Accordingly, a specialized control application (e.g., individual control modules 610- 
614) running in each server demon (e.g., multicast session 1-5) may be incorporated 
into the multicast servers which allows remote control operation for that panicular 
server demon to be accomplished remotely. The remote control may, for example, 
occur via a back channel through the Internet using foil duplex communication between 
the multicast server appUcation demons 610-614 and a remote terminal 40A which may 
be located in each of the individual remote entities. 

In this manner, the NOC resources may be further expanded to provide sophisticated 
database coordination between a plurality of sites of an remote entity. TTius, the 
resources of the NOC 4 may also be utilized by the remote entity to synchronize one or 
more databases amongst a plurality of remote sites using the above described multicast 
data distribution system. Additionally, an individual apartment complex, hotel, and/or 
community may configure the multicast server to output content based on the viewing 
preferences of each of the respective target audiences, and remotely controlled at the 
hotel or apartment via the remote terminal 40A. 

In addition to the above, a single company may request the resources of two or more 
servers located at one or more NOC 4. In this case, a distributed file system may be 
enabled between the plurality of servers such that the fost server and the second server 
have a coordinated file system and the control program running in the first server and/or 
the second server may also be controlled via a remote terminal 40A. Thus, the file 
system for a particular multicast application may be distributed across a plurality of 
servers in a single NOC 4 and/or a plurality of servers distributed across a plurality of 
NOCs 4 (e.g., 600A, 600B). 

Using, for example, global control module 615, each multicast server may be 
allocated a particular poruon of the overall bandwidth allocated to the server farm 600. 
The control for the allocation of the resources, as well as the allocation of the 
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bandwidth, may be controlled remotely and/or locally at the NOC 4 using, for example, 
a higher level privilege controlled by global control module 615. Where a higher level 
privilege is utilized at the NOC 4, the control distributed to each of the remote terminals 
40A. may be limited in that it may only control the individual multicast sessions 601 - 
605 within certain set parameters. Where the global control module 615 has a higher 
level of authority, the global control module may set certain ranges which may be 
requested by each of the multicast sessions. For example, as shown in Fig. 12, each 
remote control temiinal 40A may be assigned certain rights, resources, and remote 
asymmetric users within its domain. Thus, the particular remote teraiinal 40A may be 
given rights to certain content stored in the server farm 600, access to the Internet, 
ability to upload and/or download content to a individual file storage area, ability to 
control multicast bandwidth within certain ranges, as weU as other rights and/or 
resources. Supervisory control for managing each of the multicast sessions may remain 
in the global control module 615 in order to define certain parameters under which each 
of the remote control applications may operate. Thus, the global control module 615 
may prevent the remote control appUcations 609 from interfering with the other 
multicast demons running on the multicast server farm 612. 

As an additional example, each multicast session/user 601^05 may be assigned 
certain access rights to be controUed via remote administration and/or witiiin tiie 
multicast server farm 600 in tiie NOC 4. The number of remote administrators 
supported by each ofthe multicast servers 606. 607 may be in excess of 100. Toensure 
high integrity between customers, (multicast closed user groups), a secure operating 
system may be utilized in each multicast server 606-607. For example, as shown in Fig. 
13, each customer may be given separate file storage area, multicast addresses, and 
maximum transmission speeds defined by an administrator at the NOC. The remote 
administrator may have tiie ability to upload and delete files within a private storage 
area in the server farm 600 at tiie NOC. This may be accomplished, for example, using 
a remote graphical user interface. 
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In exemplary embodiments, under control of the global control module 615, each 
remote administrator (e.g., using remote control terminal 40A) may only be given 
access to a particular multicast group, particular announce and transfer addresses 
commands, transmission speeds, priorities, etc. Each of these parameters may be 
individually and/or globally defmed for each remote administrator using, for example, 
the global control module 615 in the NOC 4. Each remote administrator may also be 
assigned a priority scheme for a particular transmission bandwidth (e.g., transponder) 
based on a priority scheme of allocating the bandwidth among a plurality of applications 
including different multicast sessions and asymmetric Intemet users. In exemplary 
embodiments, where the remote administrator tags a particular multicast transmission 
with a higher priority request, the data is distributed with less latency than a multicast 
transmission tagged with a lower priority request. However, higher priority requests 
may be more expensive than lower priority requests. This may be important where the 
transmission resources are shared and not dedicated. Remote administrators are 
preferably only defined by the global control module 615 at the NOC 4. Individual 
asymmetric users may be defined by either the global control module 615 and/or by the 
remote control terminals 40A. 

Again referring to the multicast server farm 600 in the NOC 4, the multicast server 
may. in feet, be a plur^aUty of multicast servers, each interconnected and serving a single 
user's database fimctions. Accordingly, the remote control application nmning in 
temiinal 40A may be configured to control each of the plurality of multicast servers 
and/or a pluraUty of multicast sessions running on one or more multicast servers. The 
improved multicast service system of the present invention includes, for example, in a 
first aspect, using a single server to provide a plurality of multicast server resources 
each isolated fiom tiie otiier. For example, witfun a single server, a first multicast server 
may have a first set of users, a first set of resources, e.g.. a portion of a partitioned hard 
disk (Fig. 13) and a first set of rights (Fig. 12). A second multicast server may have a 
second set of resources, a second set of users, a second set of rights, and a second 
portion of the partitioned hard disk as one of its resources. Similarly, a thiixl and fourth 
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multicast server application may be running on a single trusted multicast server. Each 
one of the multicast server applications may be considered to be a separate ser^'er 
demon and may be assigned to different remote entities, e.g.. different companies. In 
this way, a plurality of remote entities may share a single multicast server. 

In exemplary embodiments, a video server 67 may include a plurality of movies 
stored in a compressed movie format, such as MPEG2. The video server 67 can push 
the encoded movies direcUy out over the satellite 6 via the gateways 90-93, the 
multiplexer 95 with the QPSK modulator 100. the switch 102 and the uplink 16. In 
alternate embodiments, the movies may be stored in a centralized database ,nd output 
to each multicast server session upon request. Thus, a multicast server session may 
have access to both private data and centralized data. The multicast data may be 
broadcast to the tenninal devices 2. settops 39. and/or mini-ISPs or cable head-ends. 
These movies and/or other programs shows and the like are broadcast on a continuous 
basis and may be downloaded to the PC and/or stored on the local hard disk device for 
later viewing by the user. TTie movies and/or other content may be provided by one or 
more of the multicast servers. In this manner, the server farm 600. 70 may be provided 
on a single large cached server and controUed as an individual session. Further, the 
main cache 1 16 and the server fann 70 may be integrated into a single resource with 
each of the individual sessions operated above as individual sessions with globally 
and/or remotely controUed resources. For example, a large server could incorporate all 
of the functions of the main cache and server farms 70, 600 using either a distributed 
file system and/or global control module 615 discussed above. 

Where movies are distributed via the NOC 4, it may be desirable to tag the movies 
witii one or more identifiers such as a PID number which specially identifies tiie movie. 
AdditionaUy, the broadcast times of tiie movies and description of tiie movies may be 
broadcast periodically by the video server and/or multicast server. It may be desirable 
to store the broadcast times and movie descriptions on die local hard disks in each of 
the terminal devices 2. In tiiis mamier, the user may scan through various programs 
and/or transmissions which may occur in the ftimre and selectively record various 
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programs and/or other data for later viewing or storage in a video or audio library. In 
this manner, as movies and other programs are selected by one client (e.g., mini-ISP), 
these same movies and programs may be made available to all other clients. Thus, the 
bandwidth is maximized while each of the clients may be billed using a billing system 
discussed below. 

At each of the terminal devices 2, various applications may be employed to utilize 
the asymmetric capabilities of the present invention. For example, one application 
which may be configured to run in either a settop box and/or the PC is Omnibox, 
available from Omnibox coqioration. The Omnibox fimctionality includes storage of 
audio and/or video and/or other data products, devices or applications. It also allows 
for banking functions and communication with any other connection on the system such 
as an output to a videotape recorder or other storage device. 

A plurality of video, audio and/or data inputs such as playback video or audio from, 
for example, tape recorders and/or video tape recorders, video and/or audio from a 
video streaming server, and/or rebroadcast video and/or audio transmissions which are 
detected over the satellite air links, and/or nxicrowave links, may be rebroadcast on the 
asymmetric sateUite facilities from the NOC 4. The video, audio and/or other data 
broadcast from the NOC 4 may be encoded via MPEG encoders 96-99 and output 
through multiplex 95 QPSK modulator 100, switch 102 and uplink 16 to a plurality of 
terminal devices and/or settop devices 39. In this manner, the same facility which is 
utilized to transmit the Internet services can also be utilized to transmit video and audio 
programming services in the same manner as direct broadcast television. Thus, the cost 
of the NOC can be spread over a number of service delivery platforms, thus, the cost 
of providing an individual service is minimized. 

Where a settop box 39 is utilized, it may be desirable to utilize either a network 
computer and/or another PCI based settop box such as one avaUable from Intercom PC. 
Currently, some settop box manufacturers are including a PCI expansion slot in the 
settop box and enabling the settop box to run conventional browser applications. 
Additionally, some settop box manufactures are incorporating expensive cable modems 
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into the settop boxes. However, cable modems are disadvani 
precious bandwidth over the cable resources and 
communications. This may require the entire cable syste 

user's are looking to cable companies to provide Internet resources, it is desirable to 

mcludecablemodem-like features inall new settops. However, this may be impractical 
for many cable network configurations. 

Accordingly, one aspect of the present invention proposes the integration of the 
asymmetric satellite access card into the settop box 39. In this mamier. the settop box 
may receive Internet programming as well as many additional channels or other 
services. The asymmetric satellite access card may be simply plugged into the PCI bus 
m the back of existing settop boxes. Thcs. boxes may provide Internet access services 
via a Web Browser on the television (e.g.. Web TV) and/or provide an external port 
capable of supplying high speed Internet access to one or more comiected PCS Where 
a plurality of PCS and/or WEB TVS are comiected to a single settop box. it may be 
desirable to configure the settop box to operate as a proxy server so that only a single 
asymmetric IP address need be assigned to the settop. The settop box may have an 

existmgappUcationcontainingaprogiam guide for all ofthe services provided over the 
cable network, including those services provided by both the asymmetric satellite card 
and the cable networlc. The asymmetric satellite services may be accessed using the 
settop box which is suitably configured for web applications and/or an attached PC. 
Where the settop box is configured for web appUcations. it may be desirable to utilize 
a settop box having a wireless keyboard and mouse. 

Cisco Worics 78 is a management application for each of the routers and provides 
control for the routing fimcUons in the NOC 4. The Cisco Works console also gathers 
statistics for utilization of the NOC 4. TOs is a conventional application available from 
Cisco Corporation which may be utilized in the NOC 4 to provide management 
functions. 

The Insite Manager is a managemem application for the Compaq server. Hie Insite 
Manager application may be utilized to control a plurality of Compaq servers located 
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throughout the NOC 4 and may be configured to provide various error management 
functions, error logging functions, error statistic functions, alarm systems, diagnostic 
functions, and/or other network monitoring functions. A DIVICOM system controller 
87 may be configured to provide control of a plurality of controllers within the NOC 4. 
5 For example, the DIVICOM system controller may provide both control and monitoring 
of various devices such as the encoder 96-99, the gateways 90-93, the multiplexer 95, 
QPSK modulators 100-101, and/or the switch 102. The Cisco Works console controls 
the leased line router 1 17 and the switch matrix 60A, 60B, as well as the backbone 
routers 53, access server 54. 
10 Proxy RIorlcpT 

A proxy blocker 86 disposed in the NOC 4 (see Fig. 7) may be variously configured. 
The proxy blocker 86 may be configured as an application which operates on one or 
more control computers in the NOC 4. The proxy blocker 86 may be configured to 
monitor requests originating via the Internet backbone 21 and to determine, using one 
or more statistical measures, whether a particular asymmetric teiminal 2 is being used 
as a proxy server. For example, where the number of active connections associated 
with a single source IP address exceeds a piedetennined threshold a warning or 
corrective measure may be taken. In one exemplary embodiment, if four or more active 
connections are associated with a single IP address, a warning message may be 
generated at the NOC 4. Where the number of active connections associated with a 
single IP address exceeds 6 or more active connections, corrective action may be taken. 
The statistical measures indicative of a proxy situation need not necessarily be limited 
to the number of active connections. For example, statistical measures may also include 
other factors such as the number of packets originating from the source address and/or 
other activity originating from the source address indicative of a proxy server serving 
a plurality of clients. 

Corrective action may include such actions as blocking the data flow to the 
offending IP address, instructing the ISP to disconnect die offending IP address, 
constraining the bandwidth allocated to the offending IP address, and/or sending a 
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warning to the user at the offending IP address. For example, in one embodiment, when 
the proxy seiner detects that a plurality of non-authorized clients are coupled to one or 
more terminal devices 2. the proxy blocker may react by restricting the bandwidth 
allocated to the IP address and/or shutting down connections to the suspected proxy 
terminal device 2. In exemplary embodiments, the proxy blocker 87 may inform the 
siispected proxy terminal device 2 of the suspected problem. The notification may also 
be sent to the Internet provider, corporate infonmation manger, and/or other contact 
person via the Internet and/or other appropriate means. In some embodiments, an 
automatic message may be generated instructing the contact person to investigate the 
suspected proxy situation and either rectify the situation or provide details to 
administrators in the NOC 4 as to why the proxy situation has continued to exist. If the 
situation is a legitimate situation, it is possible to either configure the proxy blocker to 
identify the individual IP address as a legitimate proxy server and/or to individually 
adjust the statistics for a particular IP address in order to minimize any future false 
indications of a proxy situation. For legitimate proxy configurations, it is desirable to 
maintain a database of all proxy servers (e.g.. by storing an associated IP address). The 
database may then be checked so that autiiorized proxy IP addresses may be excluded 
from further checks. 

Another sitiiatiori which can be problematic for tiie NOC is spoofing where an 
incorrect return address is used to flood the NOC 4 with erroneous IP addresses. 
However, the only entity which can disturb tiie operation of tiie NOC 4 is an ISP 
connected directiy to the backbone which distributes spoofed IP addresses. However, 
if such a condition did occur, it would be easy to trace. Additionally, tiie backbone 
router 53 provides a mechanism to automatically filter out any IP addresses which do 
not belong to tiie NOC 4. Accordingly, where tiie ISP providers limit tiie IP return 
address to one of tiie autiiorized set of IP addresses for an associated autiiorized user, 
tiie asymmetric system in accordance witii aspects of tiie present invention cannot be 
spoofed. 

Parental rnnt rol Filtf>rfn p 
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In an alternate embodiment of the present invention, the same filtering concepts 
discussed above may be utilized to provide parental control, as for example, a child 
friendly mini-ISP. In one exemplary embodiment, a mini-ISP may wish to advertise 
and provide services which are child friendly. In these mini-ISPs, a obscenity control 
5 filter could be activated at the mini-ISP with a data source received from the master 
cache concerning obscenity control parameters such as offensive IP addresses and/or 
news groups. This data base can be updated on a frequent basis at the NOC such as on 
a daily basis. In this manner, the mini ISPs or corporate accounts are provided with a 
very useful and up-to-date filtering service as a service of the NOC. The mini-ISP can 

1 0 either turn this feature on or off at will in its configuration set-up parameters. Thus, the 
slave reader in the mini-ISP and/or other facility may be utilized to provide child 
friendly and/or obscenity free services to selected user groups. Further, in some 
embodiments, upon initiation of the IP session, a user may be provided with the ability 
to turn on or oflf filtering. In this maimer, a parent may have full access while a child 

15 in the same home would have restricted access. In the embodiments where a filter is 
enabled in the mini-ISP and/or corporate account, it may be desirable to configure the 
mini-ISP and/or corporate server as a proxy server. Existing applications for proxy 
servers allow requests to be filtered fix)m certain IP addresses and/or news groups. 
However, these £^plications must be supplied and installed on a weekly basis by the 

20 individual sites. By contrast, the present configuration allows for more frequent updates 
and no maintenance on the part of the mini-ISPs. Because the proxy server is connected 
to the mini-ISP, the tables as to vAdch IP addresses and news groups to be block may 
be updated continually via a download from the NOC 4. In this maimer, the mini-ISP 
can provide a much better filtering function which only blocks obscene materials while 

25 passing materials (e.g., breast cancer research) which is not of an obscene nature. 
Further, the mini-ISP and/or the terminal 2/settop 39 may provide a logging function 
whereby all web surfing as well as chaimel surfing is recorded and may be downloaded 
remotely and/or viewed locally. 
Gateway Load R^^l^nri^g 
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Referring to Fig. 7, bandwidth through the NOC 4 may be allocated among a 
number of gateways. In this way. no gateway becomes overloaded durine nomial cvcles 
in the operation of the NOC 4. Various mechanisms may be utilized to distribute 
bandwidth among a plurality of gateways in the NOC 4. For example, as shown in Fig. 
14, bandwidth required by hosts within a single time zone may be allocated such that 
IP addresses and associated PIDs are evenly distributed across a plurality of gateways 
90-93. Within a particular time zone, peak periods of use occur normally during the 
same hours. Accordingly, maximum efficiency may be achieved by generally evenly 
distributing ranges of IP addresses across the various gateways which are available at 
the NOC 4. As shown in Fig. 14. it is preferred to bunch IP addresses from a single ISP 
to a single gateway. Thus, the failure of a gateway can be easily traced. However, 
multiple ISP within the same area are preferably distributed to different gateways. For 
example, referring to Fig. 14. ISPs located in Zone A are mixed with ISPs located in 
Zone B. In this manner. ISPs associated with Zone A and Zone B are intemiixed on the 
same gateway. Similarly. ISPs located in Zone C may be mixed with ISPs located in 
Zone A and Zone B. A bandwidth management console 85 may also be utilized to 
manage the bandwidth and distribution of IP addresses across multiple gateways as 
shown in Fig. 14. 

An alternate techriique for distributing bandwidth across the various gateways is to 
limit the number of terminal devices 2 associated with a particular gateway 90. For 
example, gateway I may be limited to processing requests from IP addresses 8-9 and 
14-16. In this mamier. the bandwidth management console may monitor the output of 
the backbone router at each of the gateways to determine whether there is a danger of 
falling below a committed inforaiation rate for any of the IP addresses assigned to a 
particular gateway. If a problem is likely to occur, the bandwidth management console 
87 may reassign an IP range associated with a particular ISP to another gateway. Where 
a plurality of gateways are utilized, a router may be utilized to allocate bandwidth 
between the different channels serviced by the different gateways as shown in Fig. 14. 
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The gateways 90-93 may be hmited in speed due to a number of factors such as the 
serial communication functions of the gateway including MPEG encoding and 
translation of the IP addresses to PIDs which identify particular temiinal devices 2 to 
which the output packets are addressed. 
Roaming 

Fig. 15 provides an overview of a Roaming function which may be employed in 
embodiments asymmetric Internet system. In a roaming system, an Internet service 
providers, in each of a plurality of countries, may be assigned a different IP address 
within a particular range of IP addresses known as an roaming IP range. TTiereafter, 
when a token such as an access card, a Smartcard, a data key. or other device accesses 
a terminal device in country 1. the token will be assigned a dynamic IP address within 
the range ofthe ISP in country 1. When the user moves to country number 2 and may. 
for example, utilize a terminal in country number 2. such as in a hotel or a portable dish, 
the user inserts his token and receives a second IP address in the range assigned to the 
ISP in country number 2. Tht IP address is negotiated between the terminal device and 
the Internet service provider. Similarly when the user moves to country 3, a third IP 
address is negotiated between the terminal device and the ISP and it operates according 
to the description in the previous two countries. 

The token does not need to know about the IP range since it is not required for the 
negotiations between the terminal device 2 and the ISP. However, the token is 
preferably configured to be a roaming token which is not associated with a fixed IP 
address. According, in a roaming configuration, the token is preferably configured such 
that it can be utilized with any one of the plurality of IP addresses within the range for 
any selected country. In the roaming system, it is highly advantageous to configure the 
system such that the token is not associated with a particular IP address. In this manner, 
the system remains flexible enough to accept any IP address from any of the ISPs while 
still allowing billing to be associated with the token assigned to a particular user. 
Although a movable token may be desirable in many situations, die token need not be 
a physical key. For example where billing is centralized, the token may simply be an 



-46- 



^ -9/16201 



PCT/US9S-:0164 



ID value and/or password assigned to a particular user. Alternatively, the token mav 
contain an encrypted ID and/or pasword. 

In the preferred embodiment, the roaming lines are separate telephone lines which 
enable the roaming service to operate and are not part of the conventional telephone 
access into the ISP associated with conventional dial-up lines. In this way, the roammg 
lines are an added service for ZaJcNet users and not associated with use made by 
convenUonal users. H^us, an individual subscriber may pay an added fee to have access 
to roaming lines for all of the ZakNet connected ISPs. 
Conditional Acce.^^ ^Y^rm 

Each of the systems described herein may include one or more conventional 
conditional access systems. For example. Fig. 16 shows one example of a conventional 
conditional access system called "VIA Access" which is provided by France 
Telecommunications Corporation. The conditional access system may include one or 
more tokens such as a Smartcard on the settop 39 and/or temiinal device 2. Where a 
token is utilized, it may be desirable to include one or more conditional access servers, 
e.g. 1 10 and 1 1 1. in the NOC 4. The conditional access setters determine access by 
monitoring user request initiated using, for example, a remote control associated vnth 
eidier the PC and/or settop. 

While asymmetrid access systems embodying one or more aspects of the present 
inventions are shown by way of example, it wUl be understood, of course, that the 
invention is not limited to tiiese embodiments. Modifications may be made by those 
skiUed in die art. particularly in Ught of the foregoing teachings. For example, tiie 
embodiments of Figs. 1 to 16 fom, basic building blocks which may be combined in 
any suitable arrangement. It is, Uierefore. intended tiiat the appended claims cover 
any such modifications which incorporate die feamres of this invention or encompass 
tiie true spirit and scope of the invention. For example, each of die elements of die 
aforememioned embodimem may be utilized alone or in combination witii otiier 
elements of die embodiment. 
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We claim: 

I. An asymmetric satellite based temiinal device configured to receive Internet 
data from a satellite using a standard TCP/IP stack. 
5 2. The asymmetric satellite based terminal device of claim 1 including a 

personal computer having a modem, an expansion card based satellite receiver, and an 
operating system, the operating system including the standard TCP/IP stack, a first 
driver configured to access the expansion card based satellite receiver, and a second 
driver configured to access the modem, wherein the first driver is further configured 
10 to route data received from the sateUite receiver card to the standard TCP/IP stack and 
the second driver is further configured to route data from the standard TCP/IP to the 
modem via the second driver, whereby asymmetric satellite communications is enabled. 

3. An asymmetric satellite system comprising the asymmetric sateUite based 
terminal device of claim I, a network operations center located at a dirtance from the 
asymmetric sateUite based terminal device, and an Intemet having a plurality of remote 
hosts wherein the second driver is configured to web page request data to the remote 
hosts with a return address of the network operations center. 

4. The asymmetric sateUite system of clann 3 wherein the network operations 
center is configui^ to encapsulate data output to the asymmetric sateUite based 

20 terminal device from the network operations center in MPEG II packets. 

5. The asymmetric sateUite system of claim 4 the data includes WEB pages. 
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10. An asymmetric sateUite system comprising a network operations center, an 
Internet having a pluraUty of hosts, and a terminal device located at a distance from the 
network operations center and configured to utilize an IP address belonging to the 
network operations center such that access across the Internet are returned to the 

1 0 network operations center. 

11. The asymmetric satellite system of claim 10 wherein the terminal device 
includes a personal computer having a modem, an expansion card based satellite 
receiver, and an operating system, the operating system including the standard TCP/IP 
stack, and an application program for assigning the IP address as a return address of the 
terminal device, wherein the terminal device is configured to issue requests for web 
pages with a return address of the network operations center. 

12. An asymmetric satellite based terminal device configured to utilize an IP 
address belonging to a network operations center. 

13. The asymmetric satellite based terminal device of claim 12 including a 
personal computer having a modem, an expansion card based satellite receiver, and an 
operating system, the operating system including the standard TCP/IP stack, and an 
appUcation program for assigning the IP address as a retum address of the asymmetric 
satellite based terminal device, wherein the asymmetric satellite based terminal device 
is configured to issue requests for web pages with a return address of the network 

25 operations center. 

14. A networic comprising: a satellite, an Internet, a network operations center 
coupled to the Internet and configured to provide uplink data to the satellite responsive 
to data received via the Internet, and an Internet service provider network having a 
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cache facility and a slave reader for downloading data from the satellite to the cache 
facility, a router and a plurality of modems, at least a firet connection via the router and 
the modems being configured to be coupled to an symmetric Internet user and at least 
a second connection via the router and the modems being configured to be coupled to 
an asymmetric Imemet user having a satellite receiver, wherein the cache facility 
outputs data to both the symmetric and asymmetric Internet users responsive to 
requests. 

15. A network comprising: a satellite, an Internet, a network operations center 
coupled to the Internet and configured to provide uplink data to the satellite responsive 
to data received via the Intemet, and an Internet service provider network having a 
cache faciUty and a slave reader for downloading data firom the satellite to the cache 
facility, a router and a plurality of modems configured to receive requests from a 
pluraUty of users and to transmit data, responsive to the requests, back to the users, the 
cache faculty receiving cache updates from the satelUte responsive to (iser requests. 

16. The network of claim 15 wherein the slave reader includes a filter for 
filtering data downloaded from the satellite. 

1 7. A network comprising: a sateUite, an Internet, a network operations center 
including a master cache and a master reader indexing data in the master cache, the 
network operations center being coupled to the Intemet and configured to provide 
uplink data to the satelUte responsive to data received via the Internet, and an Intemet 
service provider networic having a slave cache facility and a slave reader for indexing 
data in the slave cache, for downloading data from the sateUite to the slave cache 
faculty and for coordinating with the master it»der over the Intemet to periodically 
update the slave cache via data received from the sateUite. 

18. The network of claim 17 wherein the master reader includes a filter data 
which is downloaded to each of the Intemet service providers to control the filtering of 
data downloaded via the sateUite. 
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21 . A method comprising mirroring Internet data including web data in a master 
cache of a networic operations center in an asymmetric satellite based system. 

22. The method of claim 21 including coordinating requests for web data 

between a slave reader in an ISP and a master reader in a network operations center. 

^ ^ 23. A method comprising using a hierarchical cache structure in an asymmetric 

satellite system. 

24. A method comprising distributing cache data on an asymmetric satellite 
system to a plurality of slave caches using multicasting. 

25. The method of claim 24 wherein multicasting includes multicasting to a 
20 pluraUty of slave caches located in each of a plurality of Internet service provider 

networks. 

26. A method comprising configuring an Internet service provider network to 
maintain a cache table of a remotely located master cache and to receive data from the 
remotely located master cache via asymmetric satellite transmissions responsive to user 

25 initiated requests. 

27. A method of managing a multicast server located at a central location 
comprising utilizing a plurality of multicast management stations located at remote 
locations to control distribution of multicast data from the multicast server. 
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28. The method of claim 27 wherein ,he multicas, se™ includes utilizing a 
supervtsoty program to limit control functions available to the plurality, of multtcast 

management stations. 

29. A method of operattng an asymmetric Imetne. access system comprising 
conftguring an Interne, service provider network to process a token asstgned to an 
utdtvidual user and to dynamically assign IP add«ss „f a Network Operations Center 
to the individual user irrespeaive of whether the individual us« has a user ID and 
Password assigned to .he Internet service provide wherein users may roam among 
dtfferent Interne, service providers while keeping ,he same user name and password 

30. A med»d comprising configuring an teme. service provider to t^tum data 

.=qu=^ by users from ..sources which are connected toafirs, hop via tetr^strial links 
and to return data requested by the users ftom .sources which are com,ected « a 
second hop via a satellite link. 

3 1 . A cable system comprising a cable distribution network including a plurality 
of remote Internet user terminals and a cable head-end comprising an asymmetric 
satelhte based proxy server having an Internet comiection and satellite comxection and 
a cache coupled to and providing data to the proxy server. whe«in the proxy server is 

configured such that webrequests initiated by one of the remote Intemetuserte^ 
may be returned either via the Internet connection or via the satellite comiection 
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